react/dns

A long release history, stable versioning, tests, release notes, and organization backing support dependable use. Recent repository activity is quiet, security scanning and a security policy are absent, and all four workflow actions are unpinned.

Latest v1.14.0

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and July 2026 push partly offset this, but the short-term activity gap lowers maintenance confidence.

Repo issue activity

No issues or pull requests were opened or closed in the last month, despite seven open issues and eight open pull requests. This is a mild sign of quiet project activity, not evidence of abandonment by itself.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap rather than a direct dependency-health failure.

Security policy

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.